Security update for hugo (moderate)

openSUSE Security Update: Security update for hugo Announcement ID: openSUSE-SU-2026:0337-1 Rating: moderate References: 1269015 Affected Products: openSUSE Backports SLE-15-SP7 An update that contains security fixes can now be installed. Description: This update for hugo fixes the following...

CVE-2026-58402

Hugo is a static site generator. From 0.60.0 until 0.163.3, Hugo's default code-block renderer wrote the Markdown code-fence language or info-string into the code class="language-…" data-lang="…" wrapper without HTML escaping. A fence info-string containing a quote and a script payload breaks out...